+(214) 550-0550
Email safety: Firewalls and antivirus are great, but what about your employees
The Verizon Data Breach Investigations report states that emails are the primary source of two-thirds of malware. Email is an easy target simply because there is more human touch involved in the case of emails. There’s always a stray chance that someone will end up clicking on a phishing link or downloading the wrong attachment or simply including sensitive, confidential information in an unencrypted email. The first step to securing your email systems is training your employees. Train your employees to identify harmful email messages and to be aware of your firm’s IT protocols and rules. There are 4 major ways in which your employees may end up compromising your email security. These are
-
- Falling for phishing scams: These emails will appear to have come from an authentic source and urge the reader to take an action. Usually the action involves clicking on a link and/or sharing sensitive information via an online form that looks authentic. The phishing links and the webpage clone the original site so well that it is easy to mistake them for their authentic counterparts. For example- an email that looks as if it is from the IRS, asking for sensitive financial data, or an email that seems to be from the bank asking you to log into your account, etc.
-
- Mistaking hacked emails to be authentic ones: These emails are actually from an authentic sender account, but their account may have been hacked. One of the ways to spot such email messages is if ‘something feels amiss’. For example, an email that’s ridden with typos, spelling and grammar errors, or if the writing style is different, or includes an unexplained instruction to download an attachment, fill a form or install a patch.
-
- Not following strict password hygiene: There are 2 angles to this. First is password sharing. Sharing passwords indiscriminately puts your email systems at risk. Often, people trust their coworkers and end up sharing system or email passwords without realizing the possible consequences. Sometimes, it is just so much easier to share the password than follow the protocol. For example, Bob from sales is too busy to prepare his commission report. So, he gives his password to Lisa from accounting so she can calculate his commission for the month and Lisa shares with her team so they can work on the reports. See…before you know it 3 other people apart from Bob have access to his system including his emails!The second issue in password hygiene pertains to ignoring password basics. For example, having passwords that are too simple or obvious such as dictionary words, names, etc. or not changing passwords as recommended or having the same password for multiple accounts.
- Exposing their own devices to safety threats and then using them for work purposes due to the BYOD environment: This is a threat brought into the picture due to the flexibility-oriented culture of the modern workplace. Businesses allow their employees to work from anywhere, using their own devices. For example, someone could be accessing and replying to an email from work, using their phone or iPad, connected to the open wifi at the mall’s food court. The risk such open networks bring to the table is unimaginable.
As discussed in the beginning of this blog, emails are a soft target because of the human element. You can organize classroom training sessions to educate your employees about your IT usage policies related to password management, use of personal devices, data sharing and internet access. You can also conduct IT drills and workshops to help your employees identify possible IT security threats and steer clear of those. If you don’t have the resources to do this, check with a MSP in your area. They might be able to help.
“Initiatives like World Backup Day serve as a timely reminder to businesses not only of the need to back up data, but also to protect and carefully manage this invaluable asset. Like all risk based strategies, businesses must know what really needs to be backed up in the first place. In other words, businesses must understand what the ‘mission critical data’ actually is.
Brian Ussher, President and Co-Founder, iland said: “On World Backup Day, it’s a good time to recognise how far the market has come in protecting mission-critical business data. The scalability, flexibility and on-demand nature of the cloud means that backup and DR strategies that were previously only available to large enterprise customers are now also within the reach of small and medium sized businesses.
Jon Leppard, Director, Future Facilities said: “A comprehensive backup policy should involve keeping copies of data on a local server or hard drive, but most importantly it should also be stored in an external location –usually a datacentre. But even datacentres have capacity limits on the volume of data they can store at any one time. If everyone were to back up at the same time there would be considerable pressure on network bandwidth and global data centre capacity.
Richard Agnew, VP NW EMEA, Veeam said: “In today’s connected world, businesses need to ensure availability to avoid a breakdown in operations.
“The amount of data captured by businesses every day can be a huge asset, unlocking valuable insights and creating competitive advantage. However, this same information can also cause serious headaches for those tasked with securely storing and managing it – and GDPR is putting a time limit on the need to get this right.
